Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d019ffa-9a4b-3127-b5d3-79e8391383a5.roa
File: 6d019ffa-9a4b-3127-b5d3-79e8391383a5.roa (raw, json)
Hash identifier: RxEx4GPFM5cyWqHDC4ejFYUDPm8OcG381do0FJx5vJ0=
Subject key identifier: D2:B7:37:4D:C4:51:FB:C5:6B:4C:D4:2B:54:B3:20:58:C8:E1:3C:04
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143D05CA708B796F0B11A058
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d019ffa-9a4b-3127-b5d3-79e8391383a5.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 71.193.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3d:05:ca:70:8b:79:6f:0b:11:a0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=5abb4a27-f650-4f6c-8259-c5fe55b29a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ca:fa:b4:d2:db:cb:96:4d:63:c8:ef:e1:8d:
40:74:4b:d9:71:bf:73:e9:df:66:b7:f8:42:97:ec:
33:f7:b0:ec:5b:7f:36:1a:ae:e8:0f:f7:2c:78:c3:
5c:a8:a4:bc:72:f9:e8:95:4c:9f:69:c0:7f:e6:8d:
5f:1e:69:4b:3d:c5:1c:f3:26:e0:1d:80:04:a5:cd:
95:c1:4c:fb:16:16:c3:cd:eb:41:e2:01:be:d1:17:
b6:a9:d0:9e:e4:49:60:36:bd:fb:ac:91:a1:c7:ed:
70:94:aa:e7:71:c1:97:79:78:f9:f7:fc:9c:6b:a2:
b4:a2:f5:15:8d:c1:1e:14:eb:81:17:e9:e3:ef:b3:
bf:03:19:34:3a:d1:62:0f:6f:88:ee:11:96:32:31:
b6:5e:d0:68:9f:1b:d8:8d:d4:54:84:58:ab:e8:26:
ff:10:23:32:7a:a1:c6:03:66:29:68:d2:5e:ae:11:
90:18:65:5f:dd:e2:f3:9b:14:39:d8:56:eb:fd:b1:
e0:a0:f1:b9:1f:26:7f:df:12:9b:99:e4:9f:cb:d4:
2a:00:fb:6c:af:df:b1:88:95:a7:3c:11:6c:99:17:
6c:01:47:d2:f5:23:f0:f0:9f:4f:da:22:f7:07:a9:
88:63:40:91:bb:b0:f5:73:35:91:d3:10:98:42:94:
25:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B7:37:4D:C4:51:FB:C5:6B:4C:D4:2B:54:B3:20:58:C8:E1:3C:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d019ffa-9a4b-3127-b5d3-79e8391383a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.193.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:00:48:83:41:ad:12:ad:7d:99:76:2b:07:09:ea:8e:73:3a:
86:12:e6:e9:dc:15:31:92:57:36:5b:1e:6e:31:c9:3e:c4:53:
5f:f2:7f:b8:21:cc:c6:98:6f:94:c4:50:86:0c:1b:9f:a8:b8:
16:14:59:6e:20:a8:b4:a7:e4:9b:01:fb:99:a1:7e:6e:eb:02:
23:c5:c6:67:9c:c0:cb:98:67:d4:d1:84:81:5b:be:f2:25:73:
3d:9f:54:ee:00:d8:45:23:80:8f:5a:84:cf:f3:5a:bc:8a:e8:
9f:f3:6e:31:5b:53:6d:39:b6:3a:b0:ea:18:eb:03:2e:f1:03:
25:8c:50:a0:b1:0d:1c:28:f0:44:95:1a:8b:cc:1c:3c:89:18:
6c:c8:1a:3b:96:f9:44:b8:ef:88:5b:b4:a4:cd:00:04:b5:6a:
60:09:00:06:45:dc:e1:f8:33:1b:a3:5e:be:78:00:e4:01:ef:
fe:7b:c5:6c:fb:12:d3:5a:2c:24:59:da:0c:0e:8d:3e:96:4a:
89:fc:b7:89:1f:0a:24:57:77:7a:c1:f8:ce:88:9e:dc:fa:e0:
88:19:3b:06:f1:63:ad:ba:23:8b:5a:ac:94:f1:5b:33:7a:df:
cb:92:49:41:24:9a:4c:85:33:3a:8c:bd:a2:42:83:2f:88:be:
31:1b:4d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:09:43 2025 by rpki-client